-
accountsservice (22.08.8-1ubuntu1.1) kinetic-security; urgency=medium
* SECURITY UPDATE: use-after-free in user.c (LP: #2024182)
- debian/patches/0010-set-language.patch: updated to properly return
from functions after throw_error() has been called.
- CVE-2023-3297
-- Marc Deslauriers <email address hidden> Tue, 20 Jun 2023 07:24:53 -0400
-
accountsservice (22.08.8-1ubuntu1) kinetic; urgency=medium
* Merge with Debian, remaining Ubuntu changes:
* debian/control:
- Add build-depends on dh-translations
* debian/rules:
- Build with translations to update POT file.
- set -Dextra_admin_groups to add admin users to the same groups
than user-setup is using for the initial account
- We use custom.conf, not daemon.conf
* debian/libaccountsservice0.symbols:
- Add symbols added from patches.
* debian/accountsservice.install:
- Install language-tools scripts.
* debian/patches/0001-formats-locale-property.patch:
- Addition of FormatsLocale property and SetFormatsLocale method.
* debian/patches/0005-gdm_config_file_path.patch:
- Disabled, as we are using custom.conf.
* debian/patches/0009-language-tools.patch,
debian/patches/0010-set-language.patch:
- Save user language and regional formats settings to
~/.pam_environment.
* debian/patches/0011-add-background-file-support.patch:
- Add support for a BackgroundFile property, similar to IconFile.
* debian/patches/0012-add-keyboard-layout-support.patch:
- Add XKeyboardLayouts property to report a user's keyboard layouts.
* debian/patches/0013-add-has-message-support.patch:
- Add XHasMessages property to report if a user had unread messages.
* debian/patches/0016-add-input-sources-support.patch:
- Store input sources in the user object.
* debian/patches/0021-support-extrausers.patch:
- In addition to watching /etc/{passwd,shadow,group}, also watch
those same files in /var/lib/extrausers/, if they exist.
accountsservice (22.08.8-1) unstable; urgency=medium
* Team upload
* New upstream release
* Upstream commits to prevent FTBFS:
- d/p/tests-fix-the-signature-for-the-SetLocked-call.patch
- d/p/tests-fix-invocation-of-AddUser.patch
* Drop d/p/0009-language-tools.patch
* debian/libaccountsservice0.symbols:
- Add new expiration policy related symbols
* Bump Standards-Version to 4.6.1
-- Gunnar Hjalmarsson <email address hidden> Fri, 27 May 2022 10:45:46 +0200
-
accountsservice (22.07.5-2ubuntu2) kinetic; urgency=medium
[ Marc Deslauriers ]
* SECURITY UPDATE: accountsservice incorrect privilege dropping
(LP: #1974250)
- debian/patches/0009-language-tools.patch: updated to not reset
effective uid, and migrate root-owned .pam_environment file.
- This change was originally known as CVE-2020-16126 and got reverted
by mistake in 0.6.55-3ubuntu1.
- CVE-2022-1804
* Fix FTBFS with a newer python-dbusmock package:
- debian/patches/adduser_invocation.patch: fix invocation of AddUser in
tests/dbusmock/accounts_service.py.
- debian/patches/setlocked_signature.patch: fix the signature for the
SetLocked call in tests/dbusmock/accounts_service.py.
-- Gunnar Hjalmarsson <email address hidden> Tue, 24 May 2022 19:53:07 +0200
-
accountsservice (22.07.5-2ubuntu1) jammy; urgency=medium
* Merge with Debian, remaining Ubuntu changes:
* debian/control:
- Add build-depends on dh-translations
* debian/rules:
- Build with translations to update POT file.
- set -Dextra_admin_groups to add admin users to the same groups than
user-setup is using for the initial account
- We use custom.conf, not daemon.conf
* debian/libaccountsservice0.symbols:
- Add symbols added from patches.
* debian/patches/0001-formats-locale-property.patch:
- Addition of FormatsLocale property and SetFormatsLocale method.
* debian/patches/0005-gdm_config_file_path.patch:
- Disabled, as we are using custom.conf.
* debian/patches/0010-set-language.patch:
- Save user language and regional formats settings to ~/.pam_environment.
* debian/patches/0011-add-background-file-support.patch:
- Add support for a BackgroundFile property, similar to IconFile.
* debian/patches/0012-add-keyboard-layout-support.patch:
- Add XKeyboardLayouts property to report a user's keyboard layouts.
* debian/patches/0013-add-has-message-support.patch:
- Add XHasMessages property to report if a user had unread messages.
* debian/patches/0016-add-input-sources-support.patch:
- Store input sources in the user object.
* debian/patches/0021-support-extrausers.patch:
- In addition to watching /etc/{passwd,shadow,group}, also watch those
same files in /var/lib/extrausers/, if they exist.
* debian/patches/gitlab_change_types.patch:
- fix changing account types failing on missing groups
* debian/patches/gitlab_shared_tmp.patch:
- don't use a private tmp since API clients sometime store files there
-- Sebastien Bacher <email address hidden> Tue, 22 Feb 2022 16:27:56 +0100
